FeaturesSecurity RuntimeAWS PrivateLink
Air-Gapped Connectivity

No Public Internet Allowed.

Connect your internal VPC directly to Oridio's Edge Gateways via AWS PrivateLink. Your agent traffic never traverses the public internet, completely eliminating exposure to Man-in-the-Middle (MitM) attacks and DDoS volumetric floods.

Your AWS VPC
us-east-1
PrivateLink
Oridio Edge
Dedicated Tenant

Enterprise Grade

Available on our Enterprise plan, we provision dedicated Wasm gateways and Firecracker bare-metal instances that peer directly into your AWS Organization.

No Egress Costs

Traffic routed over PrivateLink endpoints within the same region bypasses AWS NAT Gateway data transfer fees, saving significant infrastructure costs at high volumes.

IP Whitelisting Bypass

Forget maintaining complex static IP whitelists for your databases. Oridio connects via a VPC Endpoint Network Interface (ENI) that automatically inherits your local security groups.

Deep Dive: Complete Network Isolation

For enterprise deployments, sending agent traffic over the public internet is a non-starter. Oridio natively supports AWS PrivateLink, Azure Private Link, and Google Cloud Private Service Connect. This ensures that the communication channel between your internal infrastructure, your agents, and the Oridio governance plane remains entirely on the private backbone.

By deploying Oridio as a transparent proxy within your VPC, you ensure that even if an agent is compromised or subjected to a jailbreak, it physically cannot exfiltrate data to unauthorized external IP addresses. All outbound traffic is strictly governed by VPC security groups and Oridio's egress firewall rules, providing defense-in-depth at the network layer.